kmiexp Suite

A pair of php scripts which list Expiry dates for SSL certificates in eDirectory.

These scripts were written for an eDirectory implementation, and its doubtful whether they will be useful on any other platform. Expired SSL Certificates can cause operational problems, in particular with remote control and web services such as iPrint. The list highlights Certicates that have or are about to expire. Normally you should renew them, say using pkidiag or iManager. However certificate names starting in "Old" are backup copies created by pkidiag, need not be renewed and can be deleted.

To install this you need to have a web server which supports php and LDAP. The tool is tested and installed on Netware 6.5 with Apache, but should be capable of running on other combinations of web server and operating system provided that php is installed and configured with LDAP support. I recommend you create a new folder for the application files in the web server root folder. On an "out of the box" NW65 install this will be sys:Apache2\htdocs, so create sys:Apache\htdocs\kmiexp. Extract the two files from the zip archive, kmiexp.php and pkiexprun.php into this folder. No other configuration is necessary.

To run the installed scripts start a web browser on an appropriate device and point it at the kmiexp.php script. In the example above the usr would be http://[servername]/kmiexp/kmiexp.php. From there on it should be self explanatory. The script should run on any reasonably recent web browser and client operating system.

Change History

  1. 17 December 2008 - Initial public release.
  2. 12 February 2009 - Added code for php5 etc systems that don't support the deprecated http_post_vars predefined variable. Many thanks to Mike James for spotting this.
  3. 14 May 2009 - Added some hints on installing and running the script on this page. No changes to the code.


Download zip archive

These snippets and utilities are licensed under the University of Illinois/NCSA Open Source License. Here is the text of the license as it applies to this code.

To contact the writer please use this form, or if you prefer use Linked In or even Facebook.

HTML check . CSS check

© Jim Champ, last edit